Users Guide

Interface Parameter Description
l Status Check Type: Select this field to check whether Patch
Agent is enabled or not. Dell Networking W-ClearPass Policy
Manager server compares the Patch Agent Status sent by
OnGuard Agent with the configured value. If the Patch Agent
Status value is different from configured value, then client is
treated as unhealthy. If Auto-remediation is enabled, then
OnGuard Agent changes the Patch Agent Status on client to
the configured value. Select any of the following options:
n No Check - Dell Networking W-ClearPass Policy Manager
server ignores Patch Agent Status value. This means it will
not check status of Patch Agent application on client.
n Enabled - Patch Agent is turned on and automatically
update the client.
n Disabled - Patch Agent is disabled and it will not check for
missing patches and update the client.
n Notify Before Download - Patch Agent is turned on and
will notify user before downloading updates.
n Notify Before Install - Patch Agent is turned on and will
notify user before installing updates.
NOTE: The values specific to the selected product are displayed
in the Status Check Type field. For example, all the 5 values are
displayed for Microsoft Windows AutomaticUpdate. For SCCM,
only No Check, Disabled, and Notify Before Install are
displayed.
l Install Level Check: Select No Check, All, Selected on Server,
or Security. This option is only enabled if the Product-specific
check box is checked. For Microsoft SCCM, selecting All,
Selected on Server, or Security will return the full list of all
missing patches.
n All: Check for all missing patches, and search for all
available patches.
n Selected on Server:Check only for the patches pre-
selected on the server. Some Patch Management products
can push the patches to the endpoint device. This option
provides the ability to check for only the pre-selected
patches.
n Security: Check only for security updates. Some of the
products can install only security-related patches.
NOTE: If you select the Microsoft Windows Update Agent from
the Select Patch Management product list and you select an
option from the Install Level Check list, the results are listed
below:
n All: Returns the full list of missing patches.
n Selected on Server:Returns a list of missing patches that
are pre-selected on the server site.
n Security: Returns a list of missing patches that Microsoft
classifies as Security Updates.
Table 130: Patch Management Page (Continued)
Windows Hotfixes
The Windows Hotfixes page provides a set of widgets for checking if specific Windows hotfixes are installed
on the endpoint.
Dell Networking W-ClearPass Policy Manager 6.4 | User Guide Posture | 239